Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
File:                     O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft (raw, json)
Hash identifier:          wkF+FEp6N9m22YyT9nd3fYHnnsV9nr48SgehT8DOOXs=
Subject key identifier:   55:9F:B9:C6:8F:39:C7:20:16:9E:D1:3B:BB:9E:26:C1:89:2F:F6:8F
Authority key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
Certificate issuer:       /CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Certificate serial:       01962DF3F7E23BFCF8C6F13C0EAEE25875D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
Manifest number:          09B7
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: F3oEv0QBT7ejRZnF2aTKoyEK5cI.roa (hash: MTTLBQPL1aOScQOGtAiCwXpSCEzlrz60TWKC9wTFgO4=)
                          2: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl (hash: UacJloFmj8P5YnSNBYKRv9XQSNxi72KAU0FSY4GTQdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f7:e2:3b:fc:f8:c6:f1:3c:0e:ae:e2:58:75:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=559fb9c68f39c720169ed13bbb9e26c1892ff68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3e:2d:dc:cb:8f:50:46:c6:1d:68:1b:12:ea:
                    41:a7:90:16:ec:df:91:c8:e4:76:1b:b6:99:af:ab:
                    89:7d:d7:66:7d:42:e2:fa:15:82:4c:c7:b7:0f:e4:
                    fb:1f:ec:d4:f0:4d:6f:b1:e5:24:0a:cc:33:1a:29:
                    48:d6:34:66:57:ae:24:c6:39:af:02:08:3b:86:c1:
                    58:12:0b:52:f5:39:74:46:f2:77:e3:56:01:4a:cb:
                    2b:ab:59:3f:19:2f:36:4e:63:21:15:36:83:50:42:
                    93:04:5e:91:1f:8b:47:14:c4:1a:47:34:a2:3b:22:
                    1c:c3:0a:98:96:91:06:7c:f7:a3:4a:f2:11:4e:81:
                    ee:6c:ab:14:3f:22:7d:40:33:ac:f7:d6:d5:6c:71:
                    1e:8e:6b:91:e2:81:4a:eb:e3:8b:40:9e:4b:05:ab:
                    26:b4:57:25:3a:3a:17:a6:b7:36:97:7b:01:60:71:
                    0b:ff:19:85:31:33:5a:f2:64:9e:ec:65:39:de:64:
                    60:bc:d5:d7:ea:36:ce:87:d6:af:2e:86:0c:7c:96:
                    e7:3a:ec:b5:29:85:73:2f:73:de:3e:30:8a:82:10:
                    35:f4:f6:a7:83:84:22:0e:19:e1:f8:fa:49:b6:e3:
                    9e:2a:cb:9d:fb:2f:cf:47:0e:7e:3c:ef:d6:7d:67:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9F:B9:C6:8F:39:C7:20:16:9E:D1:3B:BB:9E:26:C1:89:2F:F6:8F
            X509v3 Authority Key Identifier:
                keyid:3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:92:f7:ff:0a:38:eb:0f:89:48:3a:b9:76:f6:e7:be:44:
         e6:21:2f:6d:c7:be:d8:46:10:e3:c6:9b:09:48:f4:ef:ed:f3:
         1a:db:3f:2c:8e:fb:be:23:0c:5e:e9:23:46:26:20:22:94:2d:
         7d:9a:d3:69:26:5b:d0:6b:f1:9d:e0:5e:72:55:d6:3b:27:4b:
         17:3f:6c:a8:08:1d:8a:70:b7:59:8b:9b:c5:92:92:05:0c:52:
         47:6a:1c:0f:d2:76:19:26:a7:82:8d:db:cb:77:34:83:58:1e:
         39:36:c6:f2:3e:19:22:09:91:d3:29:25:58:ec:e0:10:b3:50:
         c6:cf:b3:60:7d:c2:c3:91:ed:9e:43:b8:7d:84:8f:1c:0d:6e:
         0f:69:40:55:96:f0:c6:9a:e9:b3:04:06:f9:2b:5d:cc:31:40:
         da:86:72:a7:c1:0d:a4:42:d1:7a:09:96:39:ec:90:66:ad:ba:
         1a:4d:2b:a5:ce:f7:66:25:54:d4:7f:24:78:2d:48:9b:6e:ae:
         90:f2:8d:9c:d1:85:91:d3:20:3f:25:f3:77:29:62:96:c8:d5:
         2e:46:ed:fb:66:f7:54:40:db:0a:4d:3f:12:04:ab:58:eb:29:
         83:2f:9c:ab:f1:c7:81:48:2c:20:bc:d1:dd:db:cc:19:be:8d:
         8a:ee:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----